Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/13d5bdd4-b962-339b-84d1-b165fb00a082.roa
File:                     13d5bdd4-b962-339b-84d1-b165fb00a082.roa (raw, json)
Hash identifier:          TIafFbbJRtjSNx+McgqBYsoNDGPPIzIaeHwh5oUD8lQ=
Subject key identifier:   AD:FF:D9:A3:4F:A7:05:F3:31:30:8A:21:96:4B:3A:94:31:29:23:C4
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D00B26B40EDD5DCF94E213580
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/13d5bdd4-b962-339b-84d1-b165fb00a082.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     14618
IP address blocks:        136.226.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:6b:40:ed:d5:dc:f9:4e:21:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=8ff1f9cc-f9b7-4012-99f0-35736686d1af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c3:a0:bb:66:cb:c3:57:2c:db:ad:79:cf:cf:
                    5a:4f:3d:42:a8:37:cf:25:eb:4b:0a:73:aa:d5:6b:
                    ac:f2:61:1f:07:cd:cb:04:35:c7:b9:5c:83:46:42:
                    56:5d:7f:6d:d4:f7:ba:6a:7b:87:6f:62:fa:27:5f:
                    cd:ef:66:97:f4:c2:f4:a2:93:49:4b:61:31:f3:4d:
                    46:a6:ea:14:c1:10:14:fd:ec:c2:52:b2:2d:9c:7e:
                    e2:f8:ec:1a:73:d5:b1:8c:68:5f:48:9a:20:ed:88:
                    69:44:01:e9:13:74:49:ba:d3:b6:b6:bd:f6:da:da:
                    b3:28:81:08:b5:83:cd:f3:0d:7c:c6:1f:1f:90:8e:
                    28:be:70:d6:79:d7:a5:c2:f1:00:0c:e5:d3:f5:0d:
                    cb:0c:c0:fb:e7:53:4d:41:08:e5:b8:a6:60:5d:2b:
                    d0:aa:20:fb:dc:f0:12:1a:c6:2b:72:44:e9:71:b2:
                    8f:05:6c:a9:f9:45:e5:46:3c:20:72:17:c6:ed:e4:
                    14:1a:f3:1c:f8:97:bf:ce:95:55:b0:9f:88:34:e3:
                    da:b9:a8:a2:80:1c:71:1f:12:97:03:a6:81:45:46:
                    99:cf:3e:22:28:90:dc:cc:e9:0c:81:c7:f8:ef:9c:
                    61:65:12:85:bd:84:66:f4:09:ca:30:f1:45:23:bf:
                    1e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FF:D9:A3:4F:A7:05:F3:31:30:8A:21:96:4B:3A:94:31:29:23:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/13d5bdd4-b962-339b-84d1-b165fb00a082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:4b:20:34:77:c8:4d:e6:47:74:96:74:dc:39:08:ac:98:d6:
         d2:b6:15:db:9e:ec:d7:8c:87:6d:22:ae:ad:5f:36:22:b1:e0:
         35:cb:2b:67:5a:a3:b5:88:23:4c:8b:fb:e2:e0:5f:ab:be:1f:
         50:10:37:42:2c:1f:91:45:db:f0:8b:29:6c:cf:7c:9f:37:8a:
         6e:5c:4b:d4:2c:74:d2:0e:9b:79:2b:0f:55:37:41:00:92:e6:
         12:6a:c5:07:19:33:8c:f8:e0:56:88:96:39:dc:36:ab:d9:90:
         ca:51:e9:df:2e:51:35:2c:f8:73:58:0e:9a:bc:8d:22:b3:85:
         56:fd:67:38:d2:b2:6c:b3:46:b3:95:09:6e:01:9a:7a:81:98:
         99:c6:94:06:87:11:29:ea:d6:f4:2d:1c:8a:73:50:b4:af:f8:
         d0:9d:b7:bb:e4:22:f8:ed:2f:2e:8c:50:63:75:bb:d9:42:c3:
         14:47:2b:b1:7f:9b:06:e7:0e:ce:fa:bd:cc:fd:d2:bb:b8:a6:
         7a:92:a2:0d:10:8f:c9:70:6c:a3:d3:fd:0a:56:ee:8b:21:52:
         cf:e1:3f:49:17:1e:39:53:d5:a1:43:ce:69:19:be:d7:7a:fc:
         07:47:07:10:c3:82:e0:0b:e6:c8:3c:f6:c4:90:84:fc:63:72:
         37:7d:00:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:52 2026 by rpki-client